[cisco-voip] Troubleshooting Help

Fri Jul 6 08:43:36 EDT 2007

You are right, I am running Version 4.1(3)sr3a of CCM.
I have done some minimal debug q931 on the gateway, but with everything
working good, I am (of course) not seeing anything out of the norm.
On my CCM box, in the event log is this rather strange message:

Event Type:    Warning
Symantec AntiVirus Auto-Protect could not scan file
C:\WINNT\System32\ati3d1ag.dll for viruses due to low kernel stack.

According to Symantecs site, this is more common on Win2K boxes running
Terminal Services with a Remote Login current.  This event often leads to a
STOP error and BSOD.  Although I would think if a STOP or BSOD occured, I
would see evidence of it in the System Logs.

Still doing some digging, but yes, I am opening a TAC case and going to
update the 2801.

Thanks everyone!  If anyone thinks of anything else, let me know!

On 7/5/07, Justin Steinberg <jsteinberg at gmail.com> wrote:
>
> TAC will tell you to upgrade your IOS.  You are running an old version
> that I'm sure has bugs filed against it. You will get newer dspware by
> upgrading to 12.4 mainline code.
>
> Also, 4.2sr5a is a MCS OS version not a CCM version.  Login to your
> http://ipaddress/ccmadmin page and click the details button.  What version
> does it say you are running?
>
> Since you are able to duplicate the calls during the failure situation you
> really need to capture q931 debug to examine the cause for your issues.  I
> would personally upgrade the IOS before I waited for another failure.
>
> You could also be experiencing a hardware dsp failure.  Do you have
> anything interesting in the router logs?
>
>
>
> On 7/5/07, Todd Franklin < toddnh65 at gmail.com> wrote:
>
> > Had the phone company in late today.  They are convinced it was not
> > them.  I guess they can see all the way to their CSU/DSU and all the way
> > back to the CO, no errors at all all day long.  So they are pointing the
> > finger at my internal network!  One thing I did see, is that the CPU
> > utilization of the 2801 with the PRI hit as high as 80% early this morning.
> > I am thinking this could have done it.  (This 2801 is also the def gateway
> > for the network, though the network is quite small, only about 60 total PCs
> > and phones).
> >
> > So I guess time to open a case with TAC.
> >
> >
> >
> > On 7/5/07, kent < nws at fredf.org> wrote:
> > >
> > > I had a similar issue to the one your describing, The good news, well
> > > maybe... I got to trouble shoot it while the 1000 user call center was
> > > tring to answer the calls.  (Talk about fun!)  anyway the problem came
> > > down to a bad media termination point.  After x number of calls hit,
> > > then the weird ness started.  1 way audio etc.
> > >
> > > also, there are lots of known issues with the 12.3 train and weird
> > > audio
> > > problems.  TAC suggests you get up to the 12.4 code to fix most of the
> > > voice stuff.  You might just have a bad dsp module.   Also, if you
> > > have
> > > MTP required for your gateway.  (not sure if thats an option for mgcp
> > > like h323 at the moment)  you probably don't need to use them, but
> > > depends on your environment.
> > >
> > > Also, I know theres a rush ususally to fix the issue, when it happens,
> > > but alot of times if you can reproduce the problem with your phone and
> > > run a sniffer, you might be able to see whats happening buy the ip
> > > address of the streams.
> > >
> > > Also, TAC said on the 12.3 code, that putting the user on hold and
> > > then
> > > taking them back off, might correct it to.    but I cheated, I removed
> > > the MTP option and upgraded to 12.4 code.  :)
> > >
> > >
> > >
> > >
> > >
> > >
> > > Paul Choi wrote:
> > > > Is your 2801 receiving the digits from the LEC
> > > > properly? Is the PRI cable damaged at all?
> > > >
> > > > --- Todd Franklin < toddnh65 at gmail.com> wrote:
> > > >
> > > >
> > > >> Version 12.3(11)T9
> > > >> MGCP
> > > >>
> > > >> On 7/5/07, Voll, Scott < Scott.Voll at wesd.org> wrote:
> > > >>
> > > >>>  VGW = Voice Gateway = 2801 with PRI
> > > >>>
> > > >>>
> > > >>>
> > > >>> What version on the 2801 with PRI?  Running H323
> > > >>>
> > > >> or MGCP
> > > >>
> > > >>>  ------------------------------
> > > >>>
> > > >>> *From:* Todd Franklin [mailto:toddnh65 at gmail.com ]
> > > >>> *Sent:* Thursday, July 05, 2007 10:19 AM
> > > >>> *To:* Voll, Scott
> > > >>> *Cc:* cisco-voip at puck.nether.net
> > > >>> *Subject:* Re: [cisco-voip] Troubleshooting Help
> > > >>>
> > > >>>
> > > >>>
> > > >>> The PRI terminates on a separate 2801.  My CCM is
> > > >>>
> > > >> a 4.2sr5a (from what I
> > > >>
> > > >>> can gather!)  I don't know what VGW means, is the
> > > >>>
> > > >> VGW something to do with
> > > >>
> > > >>> the 2801?  I have no errors about a lack of DSPs,
> > > >>>
> > > >> when we did run low on
> > > >>
> > > >>> them, that usually got logged in CCM.  There is no
> > > >>>
> > > >> firewall between CCM and
> > > >>
> > > >>> the PRI.
> > > >>>
> > > >>> Thanks for the ideas!  I am now looking and
> > > >>>
> > > >> digging!!
> > > >>
> > > >>>  On 7/5/07, *Voll, Scott* < Scott.Voll at wesd.org >
> > > >>>
> > > >> wrote:
> > > >>
> > > >>> Where is the PRI terminating on?  the same 2801?
> > > >>>
> > > >>>
> > > >>>
> > > >>> What version of CM / VGW w/ PRI?
> > > >>>
> > > >>>
> > > >>>
> > > >>> Do you have enough DSP's?
> > > >>>
> > > >>>
> > > >>>
> > > >>> What codec is being ran in region and VGW?
> > > >>>
> > > >>>
> > > >>>
> > > >>> Any Firewalls between phone / CM / VGW?
> > > >>>
> > > >>>
> > > >>>
> > > >>> Scott
> > > >>>
> > > >>>
> > > >>>  ------------------------------
> > > >>>
> > > >>> *From:* cisco-voip-bounces at puck.nether.net
> > > >>>
> > > >> [mailto:cisco-voip-bounces at puck.nether.net ]
> > > >>
> > > >>> *On Behalf Of *Todd Franklin
> > > >>> *Sent:* Thursday, July 05, 2007 9:58 AM
> > > >>> *To:* cisco-voip at puck.nether.net
> > > >>> *Subject:* [cisco-voip] Troubleshooting Help
> > > >>>
> > > >>>
> > > >>>
> > > >>> Hey everyone.  I will try to keep this short, but
> > > >>>
> > > >> supply as much
> > > >>
> > > >>> information as possible.
> > > >>>
> > > >>> On june 28th, and again today on July 5, we have
> > > >>>
> > > >> had this issue:
> > > >>
> > > >>> If you are outside, and call in on a line that
> > > >>>
> > > >> comes in on our PRI, the
> > > >>
> > > >>> person receiving the call cannot hear you at all.
> > > >>>
> > > >> Yet you can hear them
> > > >>
> > > >>> perfectly.
> > > >>> If you are outside, and call in on a line that
> > > >>>
> > > >> comes in our PRI with an
> > > >>
> > > >>> automated attendant, no input is accepted.  (i.e.
> > > >>>
> > > >> Press 1 for this, 2 for
> > > >>
> > > >>> that, if you press a key, the greeting just keeps
> > > >>>
> > > >> going.  If you dial an
> > > >>
> > > >>> extension, the greeting just keeps going).
> > > >>> If you are inside, and dial out (we use a 9 to get
> > > >>>
> > > >> an outside line, this
> > > >>
> > > >>> puts you out on the PRI), the phone will show that
> > > >>>
> > > >> the call is connected,
> > > >>
> > > >>> yet you cannot hear anything at all.  No phone
> > > >>>
> > > >> ring, nothing.
> > > >>
> > > >>> Today, I pressed 9, and dialed the automated
> > > >>>
> > > >> weather phone in town, I got
> > > >>
> > > >>> connected to an Engineering firm 15 miles away.  I
> > > >>>
> > > >> hung up, dialed the same
> > > >>
> > > >>> weather phone, and got the very same Engineering
> > > >>>
> > > >> firm 15 miles away.
> > > >>
> > > >>> Also today, occasionally I would pick up my
> > > >>>
> > > >> handset, and be right in the
> > > >>
> > > >>> middle of someone's phone conversation.
> > > >>> In both cases, if you call in to a line that is
> > > >>>
> > > >> POTS going into a 2801,
> > > >>
> > > >>> you are fine.  And if you call out using a POTS
> > > >>>
> > > >> line, you are fine (even
> > > >>
> > > >>> though the POTS outbound line is on a 2801).
> > > >>>
> > > >>> All this led me to believe it was a phone company
> > > >>>
> > > >> issue, yet the assure me
> > > >>
> > > >>> it was definitely not.  I had not rebooted my CCM
> > > >>>
> > > >> in over a year, so I
> > > >>
> > > >>> rebooted it.  Both instances, in less than an
> > > >>>
> > > >> hour, things go back to
> > > >>
> > > >>> normal, but needless to say, the issue is killing
> > > >>>
> > > >> me!  Where would I start
> > > >>
> > > >>> to look for ideas on what is happening??
> > > >>>
> > > >>> Would appreciate any help at all!
> > > >>>
> > > >>>
> > > >>>
> > > >>> _______________________________________________
> > > >>>
> > > >> cisco-voip mailing list
> > > >> cisco-voip at puck.nether.net
> > > >> https://puck.nether.net/mailman/listinfo/cisco-voip
> > > >>
> > > >>
> > > >
> > > >
> > > >
> > > >
> > > >
> > > ____________________________________________________________________________________
> > > > Got a little couch potato?
> > > > Check out fun summer activities for kids.
> > > > http://search.yahoo.com/search?fr=oni_on_mail&p=summer+activities+for+kids&cs=bz
> > >
> > > > _______________________________________________
> > > > cisco-voip mailing list
> > > > cisco-voip at puck.nether.net
> > > > https://puck.nether.net/mailman/listinfo/cisco-voip
> > > >
> > > >
> > >
> > >
> >
> > _______________________________________________
> > cisco-voip mailing list
> > cisco-voip at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-voip
> >
> >
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://puck.nether.net/pipermail/cisco-voip/attachments/20070706/8e19662d/attachment-0001.html 